← Vulnerability feed

Vulnerability record · CVE-2026-8086 · published 7 May 2026

CVE-2026-8086: Osgeo gdal memory buffer overflow vulnerability

Osgeo · Gdal

A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4. This issue affects the function SWnentries of the file frmts/hdf4/hdf-eos/SWapi.c. Such manipulation of the argument DimensionName leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. Upgrading to version 3.12.4RC1 is capable of addressing this issue. The name of the patch is 9491e794f1757f08063ea2f7a274ad2994afa636. It is advisable to upgrade the affected component.

1.9 CVSS 4.0 Low EPSS 0.27% · top 82.7% CWE-119 · Memory buffer overflowCWE-122 · Heap-based buffer overflow
1.9CVSS 4.0 base score, v2 4.3
0.27%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
11References, 5 tagged exploit
17 Jun 2026Last modified by NVD

Description

A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4. This issue affects the function SWnentries of the file frmts/hdf4/hdf-eos/SWapi.c. Such manipulation of the argument DimensionName leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. Upgrading to version 3.12.4RC1 is capable of addressing this issue. The name of the patch is 9491e794f1757f08063ea2f7a274ad2994afa636. It is advisable to upgrade the affected component.

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/OSGeo/gdal/ Product
https://github.com/OSGeo/gdal/commit/9491e794f1757f08063ea2f7a274ad2994afa636 Patch
https://github.com/OSGeo/gdal/issues/14356 ExploitIssue TrackingPatchVendor Advisory
https://github.com/OSGeo/gdal/pull/14361 Issue TrackingPatch
https://github.com/OSGeo/gdal/releases/tag/v3.12.4RC1 Release Notes
https://github.com/biniamf/pocs/tree/main/gdal-swinqdims_bof ExploitThird Party Advisory
https://vuldb.com/submit/808038 ExploitThird Party AdvisoryVDB Entry
https://vuldb.com/vuln/361839 Third Party AdvisoryVDB Entry
https://vuldb.com/vuln/361839/cti Permissions RequiredVDB Entry
https://github.com/OSGeo/gdal/issues/14356 ExploitIssue TrackingPatchVendor Advisory
https://vuldb.com/submit/808038 ExploitThird Party AdvisoryVDB Entry

Track CVE-2026-8086 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2019-17545Osgeo gdal double free vulnerabilityGDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded.EPSS 2.6%8.8CVE-2019-17546Libtiff integer overflow vulnerabilitytif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-ba…EPSS 3.4%7.8CVE-2026-49014Osgeo gdal stack-based buffer overflow vulnerabilityIn GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow. It reads a geom…EPSS 0.15%7.8CVE-2019-25050Osgeo gdal out-of-bounds write vulnerabilitynetCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_clea…EPSS 0.35%5.5CVE-2025-29480Osgeo gdal classic buffer overflow vulnerabilityBuffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE…EPSS 0.23%5.5CVE-2021-45943Osgeo gdal out-of-bounds write vulnerabilityGDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile (called from PCIDSK::CPCIDSKSegment::ReadFromFile and …EPSS 1.5%1.9CVE-2026-8212Osgeo gdal memory buffer overflow vulnerabilityA flaw has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this vulnerability is the function SWSDfldsrch of the file frmts/hdf4/hdf-eos/SWap…EPSS 0.23%1.9CVE-2026-8213Osgeo gdal memory buffer overflow vulnerabilityA vulnerability has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this issue is the function GDSDfldsrch of the file frmts/hdf4/hdf-eos/GDa…EPSS 0.23%

Source: NIST National Vulnerability Database (record CVE-2026-8086), CISA KEV, FIRST EPSS (scores of 2026-10-16). This page is refreshed as NVD updates the record.